straw/.forgejo
Cobb e11cc6a854
All checks were successful
build-apk / build-and-publish (push) Successful in 7m5s
gitleaks / scan (push) Successful in 50s
ci: rootless fdroid publish via Lucy host forced-command (drop docker socket) [#444]
Replaces the 2 host-docker-socket publish steps with one SSH handoff to a
shell-denied forced-command on Lucy that re-verifies the APK signer, re-signs
the fdroid index (keystore stays on the host), and rsyncs to Rackham. Audited
4 script rounds + 1 whole-flow round.
2026-06-26 17:13:28 -07:00
..
workflows ci: rootless fdroid publish via Lucy host forced-command (drop docker socket) [#444] 2026-06-26 17:13:28 -07:00